Skip to content

Commit

Permalink
Allow custom URLs for Rekor/Fulcio for prober (#209)
Browse files Browse the repository at this point in the history
Since the prober runs in-cluster with Rekor and Fulcio, it can actually call `http://rekor-server.rekor-system.svc` instead of using the public domain.
This will give us more accurate server-side latency metrics.

Signed-off-by: Priya Wadhwa <priya@chainguard.dev>
  • Loading branch information
priyawadhwa authored Jun 13, 2022
1 parent f6a31d8 commit 6229486
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 2 deletions.
4 changes: 2 additions & 2 deletions terraform/gcp/modules/monitoring/sigstore.tf
Original file line number Diff line number Diff line change
Expand Up @@ -77,8 +77,8 @@ module "prober" {

project_id = var.project_id
notification_channel_id = var.notification_channel_id
rekor_url = local.qualified_rekor_url
fulcio_url = local.qualified_fulcio_url
rekor_url = var.prober_rekor_url
fulcio_url = var.prober_fulcio_url

depends_on = [
google_project_service.service
Expand Down
11 changes: 11 additions & 0 deletions terraform/gcp/modules/monitoring/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,17 @@ variable "dex_url" {
default = "oauth2.sigstore.dev"
}

// Prober variables
variable "prober_rekor_url" {
type = string
default = "http://rekor-server.rekor-system.svc"
}

variable "prober_fulcio_url" {
type = string
default = "http://fulcio-server.fulcio-system.svc"
}

// Set-up for notification channel for alerting
variable "notification_channel_id" {
type = string
Expand Down

0 comments on commit 6229486

Please sign in to comment.